Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTExNNGjpXdD2_A2ocHu_FlQPbw.cer
File: TTExNNGjpXdD2_A2ocHu_FlQPbw.cer (raw, json)
Hash identifier: whEm3QlDvN/0tZSLikwkiVQBvNJ+qkJd3zKnylOohlY=
Subject key identifier: 4D:31:31:34:D1:A3:A5:77:43:DB:F0:36:A1:C1:EE:FC:59:50:3D:BC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023F3D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 16 Apr 2025 06:15:43 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 203.24.163.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147261 (0x23f3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 16 06:15:43 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91516DE, serialNumber=4D313134D1A3A57743DBF036A1C1EEFC59503DBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d2:25:bf:f1:54:91:89:35:04:ce:71:99:4c:
37:ae:6a:00:eb:20:97:61:f7:82:09:b6:73:17:8b:
1a:9f:64:e4:21:ef:db:f4:1f:3a:02:73:db:b2:21:
9e:4a:3f:85:b4:53:26:08:4c:1c:a6:1b:b2:e3:2c:
dd:5c:aa:3c:e9:27:e0:ab:fe:99:cf:3d:7e:ce:73:
c7:5b:60:ff:8e:59:5e:74:27:55:67:99:c1:42:62:
fa:5d:cc:46:f9:69:5f:6a:62:ab:01:eb:fb:82:4c:
90:df:af:28:b8:c9:73:a5:03:27:ee:be:5e:d4:94:
53:8c:e4:a0:72:62:8f:da:02:c0:3b:cd:8d:ff:5e:
5a:6c:33:f7:ab:58:7b:16:8b:34:83:45:c3:9a:74:
5e:50:12:54:63:f0:0f:18:e9:db:16:05:58:fc:48:
3e:10:a8:07:ef:68:7c:fd:17:d5:79:1f:d1:e8:17:
43:8a:d4:c0:31:58:40:f2:44:fb:a8:e6:81:22:01:
ee:9e:f1:27:1b:04:77:71:fb:ee:1e:b2:9e:82:78:
3b:b5:85:fb:e2:9b:96:4d:6a:0f:ea:4a:80:c6:b1:
3f:0e:16:d9:bf:8f:ab:6c:f4:bd:f1:1f:9f:6e:3f:
c4:4c:eb:67:ee:70:73:1b:cc:1c:64:16:37:26:e1:
59:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:31:31:34:D1:A3:A5:77:43:DB:F0:36:A1:C1:EE:FC:59:50:3D:BC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.24.163.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:62:87:80:54:46:f0:d1:1c:c9:79:ba:e6:4d:a9:46:11:0f:
1f:86:ca:23:32:48:b2:eb:23:c2:82:0d:cd:5b:ac:60:01:38:
d1:1d:38:32:16:d8:2c:28:d5:9d:5e:70:94:2f:9d:fb:f1:3e:
9f:18:5f:71:45:27:12:6c:95:5c:43:2d:88:66:70:b9:cf:41:
65:74:0a:2b:4e:f4:2c:0d:f5:3d:0b:72:18:89:dc:af:30:14:
1e:2c:1c:76:d3:d5:39:47:91:7a:f2:2d:3a:43:03:55:49:17:
89:47:1c:aa:aa:cb:b4:c7:89:96:1a:60:00:1f:40:3f:99:f2:
0a:25:c2:4c:bc:a5:8b:0b:20:4c:8b:e5:eb:87:be:fe:e5:d0:
35:75:57:7f:92:b4:35:a8:0a:bf:d2:8d:b5:37:a5:21:d6:91:
b0:37:9a:8d:69:ab:92:d9:39:44:a1:76:ae:b4:4a:7f:8b:8a:
6b:fd:1e:ab:4a:7a:d6:8d:c7:cf:b6:79:0a:25:2b:7d:f5:6f:
4b:88:74:7d:c3:b1:39:7d:ab:c5:b8:ad:f6:a2:6a:32:2e:e8:
6e:9f:15:3a:bd:29:b4:7f:36:cf:4b:d1:25:fb:95:c3:28:eb:
5e:03:b3:66:d4:20:47:d3:45:16:29:88:71:ea:af:9b:e0:d2:
2d:6a:be:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:52:22 2025 by rpki-client